{"id":3454361,"url":"https://alion.io/job/digital-edge-security-engineer-estedt-working-hours","title":"Security Engineer (EST/EDT working hours)","company":{"id":2886585,"name":"Digital Edge","domain":"digitaledge.net","url":"https://alion.io/company/digitaledge-net","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":{"label":"EST","utc_offset_min":-5,"utc_offset_max":-5},"hiring_geo_confidence":"inferred","locations":["Ukraine"],"countries":["UA"],"hiring_countries":["UA"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false},{"name":"PowerShell","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-10-21T18:52:47Z","employer_posted_date":null,"last_verified_at":"2026-10-21T18:52:47Z","board_verified":false,"closed_at":null,"days_open":10,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":10},"description":"The Role\n\nThe Security Engineer starts primarily in managed detection and response (MDR). On a normal day, the focus is detecting, investigating, and responding to security events. When project work requires additional engineering capacity, the engineer may be moved to support project work. When a significant cybersecurity incident occurs - whether for a client or internally - incident response becomes the priority and the broader security team participates as needed, regardless of normal schedules.\n\nWhat You Will Do\n\nInvestigate security alerts and events and determine whether activity is benign, suspicious, or requires escalation.\n\nParticipate in detection and response operations, including guided containment and remediation decisions.\n\nAnalyze security issues and recommend remediation or configuration changes; early in the role, changes are performed under guidance rather than independently.\n\nWork with logs and telemetry from endpoints, operating systems, networks, identity systems, cloud environments, and security platforms.\n\nParticipate in client and internal cybersecurity incidents as part of the incident response team.\n\nContribute to cybersecurity projects when assigned, learning the required technology as part of the project.\n\nAnalyze internal and client security environments and make practical security recommendations under guidance.\n\nGrow into broader engineering responsibilities as your technical capability and interests develop.\n\nCore Technical Foundation\n\nWe do not expect one person to know every security product. We care more about a strong technical foundation and the ability to understand how technologies fit together.\n\nStrong understanding of TCP/IP and computer networking. Networking knowledge is fundamental to this role.\n\nIntermediate knowledge of Windows and Linux administration and security, including how systems are secured and hardened without relying only on security tools.\n\nSolid understanding of core cybersecurity concepts, threats, controls, detection, and response.\n\nWorking understanding of firewalls, network perimeter security, and modern security architecture concepts such as Zero Trust.\n\nAbility to reason through unfamiliar technical problems and learn new technologies quickly.\n\nPrior security operations, systems administration, network administration, or security engineering experience.\n\nExperience with any SIEM, EDR/XDR, log collection, or security monitoring platform.\n\nActive Directory, Microsoft Entra ID, identity management, or identity security experience.\n\nCloud infrastructure or cloud security experience.\n\nCommunication is in English – B1+ English level is required\n\nExperience That Is a Plus\n\nScripting or automation experience, such as PowerShell, Python, or similar technologies.\n\nRelevant technical certifications. Strong certifications in foundational technologies are valuable; we do not require a specific cybersecurity certification.\n\nWhat Matters Most\n\nResponsibility and ownership – you take ownership of assigned work, follow it through to completion, communicate when something is blocked or unclear, and make sure important issues do not fall through the cracks.\n\nCuriosity - when something looks unusual, you want to understand why.\n\nCreativity - you can think beyond a checklist when an investigation does not follow an obvious path.\n\nInvestigative mindset - you keep digging until the situation is understood and you are comfortable that the environment is secure.\n\nAttention to detail - small technical details can change the meaning of a security event.\n\nLearning ability - how quickly you comprehend new technologies and apply what you learn will directly influence how quickly you grow.\n\nInitiative and engagement - you are interested in the technology and the problem, not simply completing a queue of assigned tasks.\n\nTraining and Career Growth\n\nThis is a growth-oriented position. The initial concentration is detection and response. From there, the career path is not predetermined. We want to develop each engineer around both capability and passion. Someone with strength in scripting and automation may grow in that direction; another engineer may become stronger in infrastructure, cloud, incident response, security engineering, projects, or client-facing work. With sufficient growth, the path can lead to senior engineering, project leadership, client management, and potentially virtual CISO responsibilities.\n\nWorking Model\n\nFully remote position.\n\nAligned with U.S. working core hours (9 am to 5 pm EST/EDT).\n\nDetection and response is a 24x7 company function; over time, shifts may become more flexible based on team coverage and what works for the engineer.\n\nSignificant cybersecurity incidents are treated as team events and may require participation outside the normal schedule.\n\nClient communication is not expected from day one; it can become part of the role as the engineer develops.\n\nNo travel requirement.","description_format":"text","description_chars":4934,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Ukraine","iso":"UA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security"],"lifecycle":[{"event":"open","at":"2026-10-29T12:21:41Z"}],"visa":[],"liveness":{"score":72,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.801,"p_room":0.9,"age_days":10,"expected_fill_days":27,"reasons":["seen:10","win:mid"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/digital-edge-security-engineer-estedt-working-hours","json_url":"https://alion.io/job/digital-edge-security-engineer-estedt-working-hours.json","meta":{"generated_at":"2026-11-01T09:38:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14919,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2886585},"rest":"https://alion.io/mcp/rest/get_company?id=2886585"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdigital-edge-security-engineer-estedt-working-hours"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdigital-edge-security-engineer-estedt-working-hours"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdigital-edge-security-engineer-estedt-working-hours"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/digital-edge-security-engineer-estedt-working-hours\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdigital-edge-security-engineer-estedt-working-hours"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3454361}},{"tool":"search_jobs","arguments":{"company":"digitaledge.net","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3454361},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}